https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T05:38:45.814848+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-321353 EUVD-2026-321353 2026-10-18T05:38:45.851795+00:00 EUVD-2026-321353 https://cve.radiocsirt.org/vuln/fkie_cve-2018-25352 fkie_cve-2018-25352 2026-10-18T05:38:45.851843+00:00

WordPress Ultimate Form Builder Lite plugin version 1.3.7 and below contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the entry_id POST parameter. Attackers can send POST requests to the admin-ajax.php endpoint with the ufbl_get_entry_detail_action action to extract, modify, or escalate privileges within the WordPress database.

 https://cve.radiocsirt.org/vuln/ghsa-w23w-xj2v-xjfj GHSA-w23w-xj2v-xjfj 2026-10-18T05:38:45.851877+00:00

WordPress Ultimate Form Builder Lite plugin version 1.3.7 and below contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the entry_id POST parameter. Attackers can send POST requests to the admin-ajax.php endpoint with the ufbl_get_entry_detail_action action to extract, modify, or escalate privileges within the WordPress database.